High severity · published Jul 30, 2024
CVE-2024-4188
Security vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation.
7.1
CVSS
0.2%
EPSS
No
On KEV
Description
Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This issue affects Documentum™ Server: from 16.7 through 23.4.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Documentum™ Server · OpenText™
16.7 through 23.4 · source: vendor
DC
Documentum Content Server · Opentext
16.7 through 23.4 · source: CISA